[PR #396] Make Signal Service listen on a standard 443/80 port instead of 10000 #2739

Open
opened 2025-11-20 08:03:50 -05:00 by saavagebueno · 0 comments
Owner

Original Pull Request: https://github.com/netbirdio/netbird/pull/396

State: closed
Merged: Yes


This PR is a part of an effort to use standard ports (443 or 80) that are usually allowed by default in most of the environments.

Right now Signal Service runs the Let'sEncrypt manager on port 443
and a gRPC server on port 10000. There are two separate listeners.
This PR combines these listeners into one
With this change, the gRPC server runs on either 443 with TLS or 80 without TLS
by default (no --port specified).
Let's Encrypt manager always runs on port 443 if enabled.
The backward compatibility server runs on port 10000 (with TLS or without).

Agents that are running and on status Online will still be connected to 10000.
Triggering Agent restart of any version will force it to connect to port 443.

**Original Pull Request:** https://github.com/netbirdio/netbird/pull/396 **State:** closed **Merged:** Yes --- This PR is a part of an effort to use standard ports (443 or 80) that are usually allowed by default in most of the environments. Right now Signal Service runs the Let'sEncrypt manager on port 443 and a gRPC server on port 10000. There are two separate listeners. This PR combines these listeners into one With this change, the gRPC server runs on either 443 with TLS or 80 without TLS by default (no --port specified). Let's Encrypt manager always runs on port 443 if enabled. The backward compatibility server runs on port 10000 (with TLS or without). Agents that are running and on status Online will still be connected to 10000. Triggering Agent restart of any version will force it to connect to port 443.
saavagebueno added the pull-request label 2025-11-20 08:03:50 -05:00
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: SVI/netbird#2739